Skip to content
Heist/ feed
Back to feed
Medium

Security advisory

Type: advisorySources: OSVCVE: CVE-2021-41122

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2021-41122
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 11:58 UTC · Revision 1

Source evidence

CVE-2021-41122

core-osv · Original source

Published 5 Oct 2021, 23:15 UTC

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.

osv:CVE-2021-41122
Complete source record
{
  "id": "3aac68d8eb744c171656859978360a874aabcb2516a3adf0e3016604416a6bda",
  "url": "https://osv.dev/vulnerability/CVE-2021-41122",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2021-41122",
    "summary": "Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0.",
    "evidence": "osv:CVE-2021-41122",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2021-41122",
      "aliases": [
        "CVE-2021-41122",
        "GHSA-c7pr-343r-5c46",
        "PYSEC-2021-366"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/vyperlang/vyper",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8a23febbb2d523f3701f9a7d0aaf361c104a2a37"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:vyperlang:vyper:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.3.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.2.16",
            "v0.2.15",
            "v0.2.14",
            "v0.2.13",
            "v0.2.12",
            "v0.2.11",
            "v0.2.10",
            "v0.2.9",
            "v0.2.8",
            "v0.2.7",
            "v0.2.6",
            "v0.2.5",
            "v0.2.4",
            "v0.2.3",
            "v0.2.2",
            "v0.2.1",
            "0.2.1",
            "v0.2.0",
            "v0.1.0-beta.17",
            "v0.1.0-beta.16",
            "v0.1.0-beta.15",
            "v0.1.0-beta.14",
            "v0.1.0-beta.13",
            "v0.1.0-beta.12",
            "v0.1.0-beta.11",
            "v0.1.0-beta.10",
            "v0.1.0-beta.9",
            "v0.1.0-beta.8",
            "v0.1.0-beta.7",
            "v0.1.0-beta.6",
            "v0.1.0-beta.5",
            "v0.1.0-beta.3",
            "v0.1.0-beta.2",
            "v0.1.0-beta.1",
            "v0.0.4"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41122.json"
          }
        }
      ],
      "modified": "2026-10-20T10:54:59.658111245Z",
      "provider": "osv",
      "references": [
        "https://github.com/vyperlang/vyper/pull/2447",
        "https://github.com/vyperlang/vyper/security/advisories/GHSA-c7pr-343r-5c46"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2021-41122",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 386644,
  "published_at": "2021-10-05T23:15:07.487+00:00"
}